Network Security

Hello All, Seeing input error and overruns increasing in one outside interface of ASA firewallAre we seeing 1550 blocks depletion here ? My real life problem is getting too many input and overruns on the outside interface of the firewall, where as ...

Hi All, Need your help on how to block psiphon application on firepower device. we already enable the application blocking but the results still the same. Soft: 5.4.1.5 (build 33) VDB ver: build 271  Thanks Rod

HI all, Im new with CSM, and I was working with "combines rules" and I made a combines error, I had to cancel all my changes, how can I do a rollback without loosing all my changes? Thanks all.

Hi, Is it a good idea enabling netflow on asa 5585 ? What are the pros and cons  how can I enable it ? Thanks

Hello All, ASA: ASA5510 Software: Cisco Adaptive Security Appliance Software Version 9.1(6)11 We have recently setup a new location and have it configured behind a Firewall. The Flow would look like: MPLS <---> ISR4321 Router (*10.28.1.1) <---> ASA...

What's the use of TCP version of port 514? UDP is being used for syslog but not sure about the TCP-514. Can someone put some light on TCP version?

Upgrading Cisco Nexus 9372 with this kind of set-up. See topology below:

I am getting warning message while configuring NAT. New ASA NAT configuration 9.5.2 fw(config)# object network obj-192.168.217.196-1443 fw(config-network-object)# host 192.168.217.196 fw(config-network-object)# nat (inside,outside) static x.x..x.186...

Hello to everybody, how can I send syslog for connection events (not Intrusion events) to an external syslog server?Which facility and severity do have I set on Alerts configuration? Thanks in advanceLore

Hi all I had a FMC and 2 Firepower all running version 6.0.0. Firepower time is using Firesight time,, while Firesight is point ot outside NTP server. FMC and one of the Firepower time is correct point to NTP server time, another firepower unit is ...

I want to know is there an easy way to import or read into an ASA a list of IP addresses?  I can build a list of IP addresses and/or ranges, but since the list would be rather lengthy and to avoid typos, I do not want to have to type it all in by han...